CVE-2026-98446 PUBLISHED

xfs: don't let hidden_space go negative in xfs_metafile_resv_init

Assigner: Linux
Reserved: 25.09.2026 Published: 18.10.2026 Updated: 18.10.2026

In the Linux kernel, the following vulnerability has been resolved:

xfs: don't let hidden_space go negative in xfs_metafile_resv_init

LOLLM points out that if the amount of fdblocks that we can reserve for a metadata btree file goes below the space already used by that file, then the hidden_space subtraction can underflow, causing xfs_dec_fdblocks to subtract a huge amount of space. We never want the target to be less than the used sapce, so fix the logic that adjusts dblocks_avail downwards.

Also fix an error in the adjacent comment.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 1df8d75030b787a9fae270b59b93eef809dd2011 to 930a9c1c321efdaa3e7f8caecb0479cee3baf342 (excl.)
  • affected from 1df8d75030b787a9fae270b59b93eef809dd2011 to f0d8352a39f4a2e329ae45b71bb0d49e2ca0a6dc (excl.)
  • affected from 1df8d75030b787a9fae270b59b93eef809dd2011 to 476582d754cdc5110f806001417fea6c77824c13 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.15 is affected
  • unaffected from 0 to 6.15 (excl.)
  • unaffected from 6.18.55 to 6.18.* (incl.)
  • unaffected from 7.2.9 to 7.2.* (incl.)
  • unaffected from 7.3-rc5 to * (incl.)

References